Another image that comes to my mind is that of Maher Arar. We know what happened and in what circumstances. That individual suddenly wound up in another country in spite of himself, his privacy in tatters, and so on. That's no doubt an extreme case, and I hope that no one else winds up in that situation.
When an individual winds up in a situation in which he is asked for documents or must face a government institution such as a police department, and is surprised to learn that they know things about him, how can you react if that person hasn't even had the reflex to think that there was a Privacy Commissioner?